There's still malware on the app store, Apple only removes things that look like malware. They don't instrument the code during reviews.

The security of the iPhone comes entirely from the sandbox and not app curation.